Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":June 13, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
228281	2.6	注意	オムロン株式会社	-	Android 版 OpenWnn におけるアクセス制限不備の脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2013-2301	2013-03-29 12:02	2013-03-29	Show	GitHub Exploit DB Packet Storm

228282	5	警告	Joomla!	-	Joomla! における重要な情報を取得される脆弱性	CWE-200 情報漏えい	CVE-2013-1454	2013-03-29 09:27	2013-02-4	Show	GitHub Exploit DB Packet Storm

228283	9.3	危険	マイクロソフトアドビシステムズ Google	-	Adobe Flash Player における任意のコードを実行される脆弱性	CWE-119 バッファエラー	CVE-2013-0634	2013-03-28 19:30	2013-02-7	Show	GitHub Exploit DB Packet Storm

228284	9.3	危険	マイクロソフトアドビシステムズ Google	-	Adobe Flash Player におけるバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2013-0633	2013-03-28 19:30	2013-02-7	Show	GitHub Exploit DB Packet Storm

228285	10	危険	Mozilla Foundation	-	複数の Mozilla 製品のブラウザエンジンにおけるサービス運用妨害 (DoS) の脆弱性	CWE-noinfo 情報不足	CVE-2013-0784	2013-03-28 19:28	2013-02-19	Show	GitHub Exploit DB Packet Storm

228286	10	危険	Mozilla Foundation	-	複数の Mozilla 製品における任意のコードを実行される脆弱性	CWE-399 リソース管理の問題	CVE-2013-0781	2013-03-28 19:25	2013-02-19	Show	GitHub Exploit DB Packet Storm

228287	10	危険	Mozilla Foundation	-	複数の Mozilla 製品における任意のコードを実行される脆弱性	CWE-noinfo 情報不足	CVE-2013-0779	2013-03-28 19:23	2013-02-19	Show	GitHub Exploit DB Packet Storm

228288	10	危険	Mozilla Foundation	-	複数の Mozilla 製品における任意のコードを実行される脆弱性	CWE-119 バッファエラー	CVE-2013-0778	2013-03-28 19:23	2013-02-19	Show	GitHub Exploit DB Packet Storm

228289	10	危険	Mozilla Foundation	-	複数の Mozilla 製品の nsDisplayBoxShadowOuter::Paint 関数における任意のコードを実行される脆弱性	CWE-399 リソース管理の問題	CVE-2013-0777	2013-03-28 19:22	2013-02-19	Show	GitHub Exploit DB Packet Storm

228290	5	警告	Mozilla Foundation	-	複数の Mozilla 製品における脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2013-0774	2013-03-28 19:18	2013-02-19	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:June 13, 2026, 4:20 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
194351	6.1	MEDIUM Network	cloudera	cloudera_manager	Cloudera Manager 5.x, 6.x, 7.1.x, 7.2.x, and 7.3.x allows XSS.	CWE-79 Cross-site Scripting	CVE-2021-29243	2024-11-21 15:00	2021-11-8	Show	GitHub Exploit DB Packet Storm

194352	6.7	MEDIUM Local	hpe	proliant_microserver_gen10_plus_firmware proliant_ml30_gen10_server_firmware proliant_dl20_gen10_server_firmware	A potential local bypass of security restrictions vulnerability has been identified in HPE ProLiant DL20 Gen10, HPE ProLiant ML30 Gen10, and HPE ProLiant MicroServer Gen10 Plus server's system ROMs p…	NVD-CWE-noinfo	CVE-2021-29213	2024-11-21 15:00	2021-11-1	Show	GitHub Exploit DB Packet Storm

194353	9.8	CRITICAL Network	hp	ilo_amplifier_pack	A remote unauthenticated directory traversal security vulnerability has been identified in HPE iLO Amplifier Pack versions 1.80, 1.81, 1.90 and 1.95. The vulnerability could be remotely exploited to …	CWE-22 Path Traversal	CVE-2021-29212	2024-11-21 15:00	2021-11-1	Show	GitHub Exploit DB Packet Storm

194354	6.1	MEDIUM Network	wpmailster	wp_mailster	WP Mailster 1.6.18.0 allows XSS when a victim opens a mail server's details in the mst_servers page, for a crafted server_host, server_name, or connection_parameter parameter.	CWE-79 Cross-site Scripting	CVE-2021-28975	2024-11-21 15:00	2021-10-22	Show	GitHub Exploit DB Packet Storm

194355	6.5	MEDIUM Network	rconfig	rconfig	rConfig 3.9.6 is affected by a Local File Disclosure vulnerability. An authenticated user may successfully download any file on the server.	CWE-22 Path Traversal	CVE-2021-29006	2024-11-21 15:00	2021-10-11	Show	GitHub Exploit DB Packet Storm

194356	8.8	HIGH Network	rconfig	rconfig	Insecure permission of chmod command on rConfig server 3.9.6 exists. After installing rConfig apache user may execute chmod as root without password which may let an attacker with low privilege to ga…	CWE-276 Incorrect Default Permissions	CVE-2021-29005	2024-11-21 15:00	2021-10-11	Show	GitHub Exploit DB Packet Storm

194357	8.8	HIGH Network	rconfig	rconfig	rConfig 3.9.6 is affected by SQL Injection. A user must be authenticated to exploit the vulnerability. If --secure-file-priv in MySQL server is not set and the Mysql server is the same as rConfig, an…	CWE-89 SQL Injection	CVE-2021-29004	2024-11-21 15:00	2021-10-11	Show	GitHub Exploit DB Packet Storm

194358	4.3	MEDIUM Network	silverstripe	silverstripe	Default SilverStripe GraphQL Server (aka silverstripe/graphql) 3.x through 3.4.1 permission checker not inherited by query subclass.	CWE-863 Incorrect Authorization	CVE-2021-28661	2024-11-21 15:00	2021-10-8	Show	GitHub Exploit DB Packet Storm

194359	7.6	HIGH Physics	xen fedoraproject debian	xen fedora debian_linux	PCI devices with RMRRs not deassigned correctly Certain PCI devices in a system might be assigned Reserved Memory Regions (specified via Reserved Memory Region Reporting, "RMRR"). These are typically…	CWE-269 Improper Privilege Management	CVE-2021-28702	2024-11-21 15:00	2021-10-6	Show	GitHub Exploit DB Packet Storm

194360	5.4	MEDIUM Network	esri	portal_for_arcgis	Stored cross-site scripting (XSS) issue in Esri Portal for ArcGIS may allow a remote unauthenticated attacker to pass and store malicious strings in the home application.	CWE-79 Cross-site Scripting	CVE-2021-29110	2024-11-21 15:00	2021-10-2	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed